diff --git a/.github/workflows/sonar.yml b/.github/workflows/sonar.yml
index 292988b5..7a214ce5 100644
--- a/.github/workflows/sonar.yml
+++ b/.github/workflows/sonar.yml
@@ -47,7 +47,7 @@ jobs:
 
       - name: Setup Java
         # The SonarScanner for .NET runs on the JVM; SonarQube Cloud requires Java 17+.
-        uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a # v5
+        uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5
         with:
           distribution: temurin
           java-version: '17'